Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Unsupported access method, please file a certgrinder bug" #69

Open
tykling opened this issue Oct 15, 2020 · 1 comment
Open

"Unsupported access method, please file a certgrinder bug" #69

tykling opened this issue Oct 15, 2020 · 1 comment
Assignees
Labels
needsinfo Issues which are pending more information
Milestone

Comments

@tykling
Copy link
Owner

tykling commented Oct 15, 2020

This happens when an OCSP responder isn't working and Certgrinderd goes to the next server, more info needed:

2020-10-14 00:00:04 +0000 certgrinder ERROR certgrinderd: OCSP request failed for URL http://ocsp.int-x3.letsencrypt.org with HTTP status code 500 - trying next OCSP server
2020-10-14 00:00:04 +0000 certgrinder WARNING Traceback (most recent call last):
2020-10-14 00:00:04 +0000 certgrinder WARNING   File "/home/certgrinderd/virtualenv/bin/certgrinderd", line 8, in <module>
2020-10-14 00:00:04 +0000 certgrinder WARNING     sys.exit(main())
2020-10-14 00:00:04 +0000 certgrinder WARNING   File "/usr/home/certgrinderd/virtualenv/lib/python3.7/site-packages/certgrinderd/certgrinderd.py", line 1236, in main
2020-10-14 00:00:04 +0000 certgrinder WARNING     method()
2020-10-14 00:00:04 +0000 certgrinder WARNING   File "/usr/home/certgrinderd/virtualenv/lib/python3.7/site-packages/certgrinderd/certgrinderd.py", line 543, in get_ocsp_command
2020-10-14 00:00:04 +0000 certgrinder WARNING     ocsp_response = self.get_ocsp_response(certpath=self.conf["certificate-file"])
2020-10-14 00:00:04 +0000 certgrinder WARNING   File "/usr/home/certgrinderd/virtualenv/lib/python3.7/site-packages/certgrinderd/certgrinderd.py", line 608, in get_ocsp_response
2020-10-14 00:00:04 +0000 certgrinder WARNING     ), "Unsupported access method, please file a certgrinder bug"
2020-10-14 00:00:04 +0000 certgrinder WARNING AssertionError: Unsupported access method, please file a certgrinder bug
2020-10-14 00:00:04 +0000 certgrinder ERROR Did not get an OCSP response in stdout from certgrinderd
2020-10-14 00:00:04 +0000 certgrinder ERROR Failed getting a new OCSP response for domainset: ['deic-ore.anycast.censurfridns.dk', 'deic-ore.anycast.censurfridns.nu', 'deic-ore.anycast.uncensoreddns.org', 'deic-ore.anycast.uncensoreddns.dk', 'anycast.censurfridns.dk', 'anycast.censurfridns.nu', 'anycast.uncensoreddns.org', 'anycast.uncensoreddns.dk']
reloadAllCertificates()
exporter_exporter: stopped
exporter_exporter: started
@tykling tykling self-assigned this Oct 15, 2020
@tykling tykling added this to the 1.0 milestone Jan 16, 2021
tykling added a commit that referenced this issue Jan 17, 2021
…an AUTHORITY_INFORMATION_ACCESS extension in a certificate to get more info for issue #69
@tykling tykling added the needsinfo Issues which are pending more information label Jan 17, 2021
@tykling
Copy link
Owner Author

tykling commented Jun 16, 2022

2022-06-16 14:30:02 +0000 certgrinder WARNING AssertionError: Unsupported access method found in AUTHORITY_INFORMATION_ACCESS extension in certificate with subject <Name(CN=irchub3.servers.tyknet.dk)>. Access method found was: 'caIssuers', please file a certgrinder bug with this info and if possible a URL for the certificate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needsinfo Issues which are pending more information
Projects
None yet
Development

No branches or pull requests

1 participant